Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: BEcTNmz/6/Cdv9tKLDeSZpls5AemquBNZIjCyRcnhSc=
Subject key identifier: 65:2F:DE:A5:2C:ED:91:0C:E0:0B:A6:58:58:58:B0:A5:A7:C6:09:41
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019D9BBEEDD0448E7DB879BAF54F70C88CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 14:01:14 +0000
Manifest this update: Fri 17 Apr 2026 14:01:14 +0000
Manifest next update: Sat 18 Apr 2026 14:01:14 +0000
Files and hashes: 1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: yy9E8DHw+EYQHjYMhfZ7+T/GW8MjdvzglMsrpwoWiqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ed:d0:44:8e:7d:b8:79:ba:f5:4f:70:c8:8c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Apr 17 14:01:14 2026 GMT
Not After : Apr 18 14:01:14 2026 GMT
Subject: CN=652fdea52ced910ce00ba6585858b0a5a7c60941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:04:dd:71:41:a1:2a:d1:18:0f:73:c4:62:
2f:78:85:2c:3a:02:83:c1:fc:2b:1c:88:2a:ff:cd:
7c:b0:15:8d:7f:cf:f0:d1:98:df:1a:3e:b8:7e:d8:
07:4b:a7:a0:24:8e:42:45:31:99:84:bd:f7:f7:80:
38:f8:80:59:9b:93:c6:cf:33:c2:18:3b:cb:79:04:
dd:2e:c3:94:0f:c2:97:85:ce:99:9c:63:69:1e:da:
fe:9f:99:c8:8b:28:10:48:9b:87:b1:20:b9:7c:3c:
40:56:5f:52:3f:9d:a8:44:f0:f7:84:24:cb:b4:fc:
55:00:59:11:b9:7a:80:23:c3:a7:fa:af:e8:df:5b:
82:4b:0b:40:fa:58:cc:76:fe:8d:7e:82:39:0b:4e:
96:99:fb:ec:e5:bd:68:d9:41:58:e0:3f:14:9e:bc:
a3:3f:72:49:f8:6d:be:1a:99:9a:3e:64:db:b6:79:
54:ae:c9:d4:e3:72:65:2f:f1:e9:54:d5:34:a6:09:
ec:82:82:69:d7:f0:06:8f:7d:b3:3a:8d:e2:48:9f:
08:3d:98:e8:92:79:c1:50:8f:7f:64:cc:64:ef:03:
42:cd:7d:0d:45:27:95:b7:e3:a3:2a:a8:14:27:c2:
12:fe:cb:2b:e2:f4:ce:02:d0:4f:96:d3:88:65:e7:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:DE:A5:2C:ED:91:0C:E0:0B:A6:58:58:58:B0:A5:A7:C6:09:41
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d4:b6:e4:a8:e3:22:c0:97:eb:17:39:0d:7f:35:e1:19:16:
94:dc:67:ee:9e:e0:53:42:dc:17:86:cf:df:d2:4d:59:f7:f5:
9a:4a:0a:c6:db:3c:f0:f1:3c:5c:59:fe:2b:e4:3f:a2:a5:bd:
ab:ff:8c:65:7d:08:36:1b:8d:1e:ff:95:9f:48:5c:2c:b3:1d:
c8:b0:8a:a7:fe:2e:e7:92:27:14:b7:cb:04:d6:f6:dc:13:2a:
d7:1f:0d:c5:f1:09:68:bf:03:e5:8a:da:c7:05:7a:1b:ee:88:
d4:38:37:3c:69:57:32:f9:b4:2a:43:15:29:e6:6a:b1:2a:12:
83:16:56:ef:a9:10:bf:aa:2d:0c:95:b3:ea:8f:4e:ab:9e:75:
eb:ec:4d:8c:7a:7b:7a:76:1a:68:b7:22:0e:80:0a:93:77:01:
11:dd:01:56:9e:2d:a9:8b:27:de:f4:08:a2:87:4d:45:ab:9d:
a6:46:5e:4e:92:8c:31:a2:f7:64:8b:be:39:d7:70:ce:ff:14:
14:bc:6f:3e:af:83:d9:6f:14:3a:ca:f0:8d:5a:21:06:56:67:
ed:87:42:fc:28:9f:b0:ff:15:6a:8e:4e:fd:64:9c:4b:da:ef:
ad:c3:4e:49:d1:52:70:94:3d:a1:f6:d3:ca:aa:94:88:4b:2e:
63:39:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:10 2026 by rpki-client